$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: tq1WROpJh6alQmY8HDptwQRRHd/cBXrPtdVTXJP+c9M= Subject key identifier: A4:20:85:59:4D:C5:47:C2:80:AF:37:7C:9C:8C:07:D8:FE:4B:33:9C Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 01F8 Signing time: Sun 05 May 2024 04:20:06 +0000 Manifest this update: Sun 05 May 2024 04:20:05 +0000 Manifest next update: Sun 12 May 2024 04:20:05 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: eYbMg39zj+9BpwO73pl/NO0CNQbo1h5hhemlOzMS440=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: CGmdTdxNE4CtKZ1npSPVTLiZv02EjkNH36UTa8hZE6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: May 5 04:20:05 2024 GMT Not After : May 12 04:20:05 2024 GMT Subject: CN=663708f6-72aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:c8:8f:cc:e4:75:8e:f2:3a:cd:6d:6c:d5: 1b:e0:b0:99:59:4a:30:42:a5:f3:7e:8d:95:74:80: 50:69:d3:f9:fe:32:9e:7d:02:28:2b:e9:1b:da:51: 49:ff:83:45:d1:1e:0b:27:b3:4c:d6:cd:a2:a7:bd: 8f:28:3c:91:17:a9:f3:bc:98:c6:fe:93:9f:82:4b: 3e:46:ae:47:e0:01:fd:33:ab:e8:94:37:1f:69:7d: c0:7c:cc:38:71:71:3a:7d:9f:20:56:13:95:33:79: e8:65:91:5c:04:79:60:b9:35:56:aa:e3:b4:fd:5a: 91:b1:28:37:84:b7:d0:ff:a2:aa:21:ff:84:1d:18: 4e:53:d0:18:43:90:fa:00:dd:26:70:a0:51:29:53: ee:77:05:e8:09:a4:0a:0e:5a:b9:db:f0:0a:74:61: ee:64:cf:fe:40:01:2e:b6:ac:e4:d4:ad:55:de:33: 42:03:5b:1b:8b:46:b3:49:ca:31:32:7f:38:4c:64: f5:65:77:25:1f:7f:5d:97:be:b3:02:66:48:75:b8: f7:12:11:2d:a0:48:66:fa:7e:39:29:d2:54:af:e9: 3f:d1:12:59:ea:84:01:29:b5:a0:55:01:34:5d:9a: 87:22:1e:99:85:64:a2:4a:64:3b:01:c7:c8:28:7c: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:85:59:4D:C5:47:C2:80:AF:37:7C:9C:8C:07:D8:FE:4B:33:9C X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a4:68:71:16:3a:3e:d4:ff:07:9e:83:35:b7:dc:3f:99:de: 2e:f8:c2:c1:d6:a0:97:cd:a0:0a:f5:a9:94:44:5a:e3:90:a9: fc:a2:2b:44:ec:32:91:84:b6:95:96:94:c7:62:1d:1c:bf:5d: 52:bb:91:64:82:8b:90:84:16:ea:23:3c:56:9d:ab:2e:57:58: 85:74:cb:96:69:d5:24:23:57:08:34:f2:c9:85:64:91:8b:96: 86:4d:21:bc:a9:ca:e5:96:c4:44:7b:64:f5:13:f0:4a:0b:b8: 46:4d:35:f3:fb:62:23:1b:a2:2c:33:e3:5a:56:54:10:16:c4: b8:22:81:ff:50:8d:f3:a6:c8:06:97:50:3c:62:81:d9:24:c3: ec:c5:bb:25:ff:3a:51:d4:d6:10:7a:64:06:70:e0:79:ea:88: 72:92:40:45:e2:9e:4e:90:18:e0:81:f7:fa:19:50:fb:2b:a4: 28:37:fa:54:e1:aa:0e:9c:c5:82:c9:3c:46:1b:dc:c5:98:2c: 5c:81:33:4c:62:58:a8:a8:d5:0c:bd:fb:d8:d9:ed:5c:8e:44: cb:09:47:fb:a0:51:d7:e7:07:9e:7d:28:a3:c0:61:f1:cb:5c: 97:41:d6:cf:c6:d3:5f:6f:a0:4a:9f:cc:9d:25:fa:e0:56:81: 32:3e:2d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjQwNTA1MDQyMDA1WhcNMjQwNTEyMDQyMDA1WjAYMRYwFAYD VQQDEw02NjM3MDhmNi03MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVfIj8zkdY7yOs1tbNUb4LCZWUowQqXzfo2VdIBQadP5/jKefQIoK+kb2lFJ /4NF0R4LJ7NM1s2ip72PKDyRF6nzvJjG/pOfgks+Rq5H4AH9M6volDcfaX3AfMw4 cXE6fZ8gVhOVM3noZZFcBHlguTVWquO0/VqRsSg3hLfQ/6KqIf+EHRhOU9AYQ5D6 AN0mcKBRKVPudwXoCaQKDlq52/AKdGHuZM/+QAEutqzk1K1V3jNCA1sbi0azScox Mn84TGT1ZXclH39dl76zAmZIdbj3EhEtoEhm+n45KdJUr+k/0RJZ6oQBKbWgVQE0 XZqHIh6ZhWSiSmQ7AcfIKHzDrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQghVlN xUfCgK83fJyMB9j+SzOcMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZpGhxFjo+1P8HnoM1t9w/md4u+MLB1qCXzaAK9amURFrjkKn8oitE 7DKRhLaVlpTHYh0cv11Su5FkgouQhBbqIzxWnasuV1iFdMuWadUkI1cINPLJhWSR i5aGTSG8qcrllsREe2T1E/BKC7hGTTXz+2IjG6IsM+NaVlQQFsS4IoH/UI3zpsgG l1A8YoHZJMPsxbsl/zpR1NYQemQGcOB56ohykkBF4p5OkBjggff6GVD7K6QoN/pU 4aoOnMWCyTxGG9zFmCxcgTNMYlioqNUMvfvY2e1cjkTLCUf7oFHX5weefSijwGHx y1yXQdbPxtNfb6BKn8ydJfrgVoEyPi2c -----END CERTIFICATE-----Generated at Sun May 5 05:21:55 2024 by rpki-client on console-fra.rpki-client.org